Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ea64b1fc-e503-4319-938f-0942f418ac39.roa
File: ea64b1fc-e503-4319-938f-0942f418ac39.roa (raw, json)
Hash identifier: +jYOeuBGcHhEN0C7ACxIsyRaZ0V4FxBtbMGqcLDm70c=
Subject key identifier: 5A:A3:4A:10:D1:F6:94:FE:17:57:C3:BF:EB:F1:A5:AD:B1:4B:C9:4A
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 74D198302E5BF4208E829F1050BCD1C836E282C4
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ea64b1fc-e503-4319-938f-0942f418ac39.roa
Signing time: Mon 22 Jun 2026 02:40:26 +0000
ROA not before: Mon 22 Jun 2026 02:40:26 +0000
ROA not after: Sun 20 Sep 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06b:840::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:d1:98:30:2e:5b:f4:20:8e:82:9f:10:50:bc:d1:c8:36:e2:82:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jun 22 02:40:26 2026 GMT
Not After : Sep 20 23:59:59 2026 GMT
Subject: serialNumber=59de016ca227de8935c1e3a54c54c0822c98213ca83e432494c5666d0ee73ab8, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:3f:2d:a1:a2:d9:3c:57:11:95:9b:c4:8f:e3:
a4:0d:96:73:ed:d4:a8:e0:a0:9f:e8:c7:38:5d:82:
8d:25:41:97:40:5d:38:7a:a0:c6:1b:4b:a7:ef:7d:
a0:a6:a1:16:53:2f:62:af:bf:42:bb:89:26:80:5b:
87:57:e5:e8:85:ff:32:bc:ab:46:ec:e0:aa:bf:9c:
e8:d4:ff:b0:87:dd:3f:3d:57:7c:3b:8b:75:19:08:
d9:b3:dd:69:5e:86:40:d3:c8:df:d1:b7:c3:3e:f9:
e6:53:d5:51:85:22:27:1f:0a:63:b3:0c:6a:25:77:
a9:3b:1b:f8:24:30:2f:5a:df:99:81:ba:c6:85:9f:
b4:29:57:32:d7:db:16:94:48:fc:85:bf:b1:e4:1b:
a4:86:d7:0c:d8:fe:c3:58:2c:c1:60:68:63:8c:03:
c8:b1:64:d6:f0:4e:13:36:32:7c:fc:1c:90:a8:68:
0d:ba:38:f0:15:ff:6a:1d:e9:48:88:be:75:d5:fc:
a3:c1:a1:90:d0:bc:fb:8f:d4:1e:01:ba:73:db:10:
42:d4:52:88:a7:e7:76:e7:69:75:0f:14:4c:4d:d1:
0f:60:1e:70:c4:91:a7:a9:80:87:be:2f:7d:91:41:
1a:03:5c:6f:60:25:26:69:4f:ff:aa:07:b0:72:49:
05:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:A3:4A:10:D1:F6:94:FE:17:57:C3:BF:EB:F1:A5:AD:B1:4B:C9:4A
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ea64b1fc-e503-4319-938f-0942f418ac39.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06b:840::/48
Signature Algorithm: sha256WithRSAEncryption
07:39:c5:e9:83:61:70:db:d2:f8:8f:79:7d:15:1b:fb:90:a5:
67:d0:40:08:5f:cf:44:23:b2:0a:96:05:fa:7d:10:a3:fe:a2:
df:0d:e0:d2:06:b5:ae:93:2a:6f:f0:0b:60:07:f1:0d:af:40:
ae:2c:25:a4:e8:da:be:a6:f4:67:c6:e5:76:59:3c:8d:e7:cd:
1c:16:e9:8f:3c:e0:bb:13:24:8a:19:69:e4:b6:3e:ca:77:47:
6f:cc:22:0a:1f:4a:86:c9:48:23:c1:b5:98:9f:5c:01:ef:d3:
b8:96:0e:24:77:73:98:69:b8:94:5c:b9:e2:48:fc:a7:55:ac:
28:3a:b2:ad:9b:6b:f7:99:6d:20:72:23:42:b0:68:02:75:b5:
b9:5c:84:5b:11:9e:b2:3c:cc:2f:cc:1d:e2:a1:b1:ce:1c:ac:
eb:19:e1:ce:31:82:b5:a5:4f:85:fe:d3:24:61:09:26:b4:70:
dd:b6:74:c7:7b:f6:ca:ce:de:26:36:d8:da:8b:03:20:40:24:
fe:ce:88:c8:fe:7a:08:e7:ae:b6:c9:68:0b:d8:30:7c:a4:44:
8d:ea:51:02:a8:b0:5b:2e:fd:c5:1b:b0:93:80:f0:b0:41:03:
11:93:58:b6:5a:b6:b4:27:be:8e:09:00:36:f8:7d:d5:33:b0:
ce:13:2b:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:54:26 2026 by rpki-client